MALICIOUS
60
Risk Score
Malware Insights
MITRE ATT&CK
T1059.003 Windows Command Shell
The sample is an RTF file containing a batch script. The script's logic involves renaming existing executables to a hidden state and then copying itself to replace them, potentially to disguise malicious payloads or evade detection. The CLAMAV_DETECTION heuristic further supports its malicious nature.
Heuristics 1
-
ClamAV: Legacy.Trojan.Trojan-92 critical CLAMAV_DETECTIONClamAV detected this file as malware: Legacy.Trojan.Trojan-92
Open this report in the interactive analyzer, or submit your own file for analysis.